This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.mft
File:                     amXibTSlO_J-8hE5NjBzuia52_o.mft (raw, json)
Hash identifier:          M9SWITLQQDBld834jJ+IDISJvSLKWVXaDEh7gkPOPWU=
Subject key identifier:   51:48:25:CB:01:35:DB:24:7D:2A:1B:46:9C:04:ED:36:BA:20:14:5C
Authority key identifier: 6A:65:E2:6D:34:A5:3B:F2:7E:F2:11:39:36:30:73:BA:26:B9:DB:FA
Certificate issuer:       /CN=A914B46A/serialNumber=6A65E26D34A53BF27EF21139363073BA26B9DBFA
Certificate serial:       05E9
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/amXibTSlO_J-8hE5NjBzuia52_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.mft
Manifest number:          05E9
Signing time:             Sat 24 Jan 2026 22:13:55 +0000
Manifest this update:     Sat 24 Jan 2026 22:13:54 +0000
Manifest next update:     Sat 31 Jan 2026 22:13:54 +0000
Files and hashes:         1: amXibTSlO_J-8hE5NjBzuia52_o.crl (hash: 7ZZeaBMGgAXRgqjag6UhKFiNQM1cyyqmMU3dKNbX+zY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.crl
                          rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/amXibTSlO_J-8hE5NjBzuia52_o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:13:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1513 (0x5e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B46A, serialNumber=6A65E26D34A53BF27EF21139363073BA26B9DBFA
        Validity
            Not Before: Jan 24 22:13:54 2026 GMT
            Not After : Jan 31 22:13:54 2026 GMT
        Subject: CN=69754423-2841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2b:28:7e:43:47:9d:56:00:9d:fa:8c:68:1f:
                    18:10:34:5a:0e:62:24:01:51:93:dd:bd:be:98:59:
                    50:1b:dd:a3:11:c6:a7:1a:c2:9d:f4:76:f8:cd:60:
                    38:a0:b2:9b:6c:eb:b5:d5:e5:26:1e:0e:5d:67:41:
                    49:99:b5:87:8c:59:56:ce:3f:e0:fb:66:cc:ea:f0:
                    d8:15:8a:fc:91:47:c3:a1:28:d1:a6:45:8e:17:55:
                    02:27:75:2d:67:7e:d7:27:18:09:1c:f3:18:3b:6f:
                    42:ef:01:b4:8a:4b:63:89:fa:b5:47:2e:52:25:7a:
                    02:70:bc:a3:b4:3c:67:ca:38:f3:c0:7e:12:35:34:
                    1d:9e:88:14:1d:c6:31:76:5c:74:80:8c:b2:be:54:
                    9d:8d:2e:ae:64:72:a6:cb:07:fb:da:81:f1:79:04:
                    3f:ea:9d:56:68:13:6c:81:34:cc:aa:17:82:51:3b:
                    97:5e:fb:55:34:f2:0f:ba:f7:93:77:2f:b2:b6:6e:
                    33:42:39:b5:2f:34:da:1c:a6:de:95:32:c7:59:c8:
                    20:ee:4c:09:42:fa:4e:ad:b0:b5:7e:53:02:20:e1:
                    19:d7:3d:9c:f8:42:c5:f5:e5:10:82:4c:b8:41:ea:
                    13:96:bf:0b:d4:35:f9:f8:25:b7:ab:1a:c7:76:9c:
                    bc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:48:25:CB:01:35:DB:24:7D:2A:1B:46:9C:04:ED:36:BA:20:14:5C
            X509v3 Authority Key Identifier:
                keyid:6A:65:E2:6D:34:A5:3B:F2:7E:F2:11:39:36:30:73:BA:26:B9:DB:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/amXibTSlO_J-8hE5NjBzuia52_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:86:1b:f0:23:f6:98:4e:b1:12:f9:0b:c1:5e:d3:41:ab:28:
         52:36:52:89:25:8d:71:ad:6b:4e:36:de:c2:9b:a8:54:42:31:
         d0:1c:30:ac:1b:ad:ba:80:65:54:2e:b7:eb:83:4d:ef:f2:52:
         1b:55:b3:54:17:a2:c4:aa:9f:e9:1c:ae:ef:c1:35:80:5f:30:
         32:a9:92:2c:0d:ad:f6:63:a0:f4:65:09:cb:eb:92:98:7d:96:
         12:a5:d6:fc:6a:40:98:ec:48:da:e4:cc:98:36:d3:4c:6d:e4:
         08:40:f7:d9:ce:4a:83:08:a0:e8:05:d0:ce:94:69:2b:57:f7:
         35:6a:8d:2c:88:e2:50:40:68:39:09:21:e5:20:17:ff:44:98:
         5e:10:fd:a3:35:18:f6:ec:5f:85:0c:ce:93:ed:8c:55:9f:2d:
         a6:a0:db:68:e5:3b:6e:f4:0c:b9:08:18:e9:a0:9d:60:ec:a9:
         50:e6:a2:e3:86:a4:59:7d:54:c2:e4:f6:15:26:66:dc:0b:61:
         1d:b1:0c:11:7a:db:04:6d:b9:b3:39:b6:30:aa:28:09:8e:fd:
         b0:1e:77:1f:ed:57:38:77:f4:b5:18:b5:c7:7c:d1:8e:ce:c9:
         de:0b:a6:c9:42:db:ad:c4:c0:7b:7c:01:86:ca:f2:b0:88:ad:
         c4:77:eb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:51:23 2026 by rpki-client